Lucene search

K
wpvulndbChris GrelloWPVDB-ID:0B4FCC15-7B1B-4F76-83CA-F70E3362CAE6
HistoryFeb 16, 2023 - 12:00 a.m.

Schema - All In One Schema Rich Snippets < 1.6.6 - Multiple CSRF

2023-02-1600:00:00
Chris Grello
wpscan.com
12
plugin
csrf
vulnerability
schema - all in one schema rich snippets

EPSS

0.001

Percentile

27.7%

The plugin does not properly validate a user intended to do an action, which they could have done using nonce checks. This makes it possible for attackers to conduct CSRF attacks against an unsuspecting administrator, tricking their browser into editing some of the plugin’s settings.

EPSS

0.001

Percentile

27.7%

Related for WPVDB-ID:0B4FCC15-7B1B-4F76-83CA-F70E3362CAE6